Unrated severityOSV Advisory· Published Jan 15, 2026· Updated Jan 15, 2026
CVE-2025-67083
CVE-2025-67083
Description
Directory traversal vulnerability in InvoicePlane through 1.6.3 allows unauthenticated attackers to read files from the server. The ability to read files and the file type depends on the web server and its configuration.
Affected products
1- Range: 0.9beta, v1.0.0, v1.0.1, …
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.